Description
This article will describe how to download the fortisiem upgrade image for workers and supervisor
Scope
You must be currently under fortiSIEM support in order to download the image.
For FortiSIEM Supervisor and Workers
Solution
Order of upgrades between supervisor and workers are strictly:
1 - Upgrade the Supervisor
2 - Upgrade the Workers
Obtaining the upgrade image to prepare the upgrade:
2 - Go to Download > Firmware Images
3 - Select Product > FortiSIEM
4 - Download
5 - Select the appropriate version and download the upgrade zip file
NOTE: Upgrade files are marked beginning with FSM_Upgrade_Super-Worker All other files to download are full images and should be avoided for upgrades
Uploading the image to the supervisor and/or worker:
6 - Using an upload utility like WinSCP or any other file transfer client that allows for SCP for SFTP upload the file
The Default Username and Default Password is as follows:
root / ProspectHills
NOTE: please change the default username and password if it is still the default.
Preparing for the Upgrade:
7 - Unpackage the zip file
Example: unzip FSM_Upgrade_Super-Worker_All_5.2.5_build1615.zip
NOTE: the file name will contain the version+build number so the above is an example command.
7a - Verify the md5sum against the support site's md5sum, contact support if they differ
8 - run: /pbin/phdownloadimage file:///<folder path of the zip that has been unzipped>
Example: /pbin/phdownloadimage file:///tmp/5.2.5.1615/
NOTE: The command phdownloadimage will prepare the file by further unpackaging and verifying it's contents.
Upgrading:
Upgrading the Supervisor will take 15minutes at least up to 1+ hours. The determination of time depends on the health and current operations of the machine. It's advisable to perform some type of health check against the supervisor before an upgrade occurs. The Database update will take the longest to occur due to the amount of data it contains because of necessary schema changes.
9 - Run: screen
10 - Run: /pbin/phupgradeimage
There will be times when the machine does not provide too much feedback, please monitor health and usage while the upgrade occurs and do not cancel the upgrade at any time. If there is a failure from the upgrade, please contact support for further investigation.
